---
title: AJAXGlideRecord ACL Checking Should Be Enabled
description: "Impact Area Security Severity High Affected Element System property ## Rule ID **SN-0185** ## Impact From within client scripts, it is possible to query arbitrary data from the server via the GlideAjax API, by using a syntax similar to a…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/servicenow-rules/ajaxgliderecord-acl-checking-should-be-enabled/"
updated: "2025-03-21"
category: Rules
---

# AJAXGlideRecord ACL Checking Should Be Enabled

Impact Area

Security

           Severity

High

           Affected Element

System property

## Rule ID

**SN-0185**

## Impact

From within client scripts, it is possible to query arbitrary data from the server via the GlideAjax API, by using a syntax similar to a server-side glide record. Unless ACLs are checked, this can cause data leaks

## Remediation

Enable the AJAXGlideRecord ACL property: “glide.script.secure.ajaxgliderecord”. Any scripts using GlideAjax should be tested thoroughly to ensure that loss of functionality does not occur.

### Time to fix

15 min

## References

This rule is linked to [Common Weakness Enumeration CWE-862 Missing Authorization](https://cwe.mitre.org/data/definitions/862.html).